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POWER MANAGEMENT FAULT STRATEGY FOR 
AUTOMOTIVE MULTIMEDIA SYSTEM 

Cross Reference to Related Application 

This application is a continuation-in-part of co- 
pending U.S. Patent Application Serial No . _0 9/353 , 68 4 , 
filed July 14, 1999. This application is also related to 
co-pending application U.S. Serial No. 09/353,685, 
entitled "Power Management for Automotive Multimedia 
System," filed July 14, 1999. These applications and 
patents are hereby incorporated by reference herein in 
their entirety. 

BACKGROUND OF THE INVENTION 



The present invention relates in general to a 
method and apparatus for supplying power to an automotive 
multimedia/personal computer system, and, more 
specifically, to a power management fault strategy for 
detecting fault conditions and restoring proper operation 
without user intervention. 

Power management is an important issue in 
portable computing devices. This is especially true in 
mobile vehicles which have a limited battery capacity and 
which have stringent current limitations. As 
microprocessor-based systems become more powerful by 
using larger microprocessors and using a greater number 
of peripheral devices, power requirements increase. In 
vehicles containing an internal combustion engine and 
alternator, electric power generation may be sufficient 
to operate without much difficulty. In vehicles using 
other power plants or in an internal combustion engine 
vehicle with the engine shut off, significant limitations 
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may be placed on current consumption (both normal 
operating current and quiescent current) of the 
multimedia/ PC system. 

Partly due to available power limitations, 
5 microprocessors having low power requirements are 

normally used in mobile vehicles. As mobile computing 
functions have been introduced into vehicles, reduced 
instruction set computing (RISC) microprocessors have 
been chosen since they are smaller and consume less 

10 power. Thus, complex instruction set computing (CISC) 
microprocessors such as Intel Pentium (x86) 
microprocessors and the Motorola 68 0x0 family of 
microprocessors have been avoided. However, RISC 
microprocessors cannot run the same software as has been 

15 created for CISC microprocessors. Availability of 
operating system and applications software is much 
greater for CISC microprocessors because of the 
popularity of desktop and laptop personal computers. 
Therefore, it would be very beneficial to use a CISC 

20 microprocessor in a mobile vehicle. 

An important performance issue for a 
multimedia/personal computer based system in a mobile 
vehicle is boot-up time. A multimedia system may be 
providing information, communication, entertainment, or 

25 other functions which the vehicle user may expect to be 
available as soon as the vehicle ignition switch is 
turned on. By example, the multimedia system may include 
a navigation function and the driver may want to initiate 
input of a desired destination as soon as possible after 

30 turning on the vehicle. By maintaining full or partial 
power to the multimedia system, boot -up time can be 
reduced or eliminated, but this conflicts with the need 
to minimize power consumption. CISC microprocessors such 
as the Pentium typically have reduced power states in 

35 which processing operations are suspended while the state 
of the memory and the internal microprocessor state are 
stored. Such a reduced power state may be entered in 
response to various conditions monitored by the 
microprocessor. However, the microprocessor can't go 
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completely to sleep and still monitor the conditions 
which should wake it up. Furthermore, if the 
microprocessor has sole responsibility to conduct its own 
power management, then there is limited ability to 
recover from errors . 

Co-pending application U.S. serial number 
(199-0056) describes a vehicle input/output processor 
(V10P) using a low power microprocessor to manage power 
for a main application microprocessor. Various operating 
states of the main application microprocessor and the low 
power microprocessor facilitate low current consumption 
while a vehicle ignition is off, fast boot-up times when 
the ignition is on, and intermediate boot-up times if the 
ignition has been off (but not if it has been off for a 
long period of time, such as 24 hours) . However, if the 
main application processor malfunctions, the proper 
operating states may not be obtained and unacceptable 
current consumption may result. 



SUMMARY OF THE INVENTION 



The present invention has the advantages of 
providing efficient and robust power management of an 
in-vehicle multimedia/personal computer-based system, 
while detecting fault conditions and restoring proper 
operation without user intervention. 

In a first aspect of the invention, a method of 
powering a vehicle information, communication, or 
entertainment system is provided for mobile operation of 
information, communication, or entertainment devices in a 
vehicle. The vehicle has a vehicle powered state and a 
vehicle unpowered state. The method includes monitoring 
a state of a main application processor with a management 
processor. A change from a suspend- to -RAM state to a Run 
state without a request from the management processor is 
detected. A transition to a suspend- to-disk state is 
requested if the main application processor is in a state 



other than the suspend-to-disk state after a first time 
period after the detection of a change. 

In a second aspect, the method includes 
attempting to change the main application processor from 
a suspend state to a Run state. A status message is 
monitored with the management processor. A fault is 
corrected if the status message is absent after a time 
period that is a function of the suspend state of the 
main application processor. 

In a third aspect, the method includes 
attempting to change the main application processor from 
a suspend state to a Run state. A status message is 
monitored with the management processor. A reset signal 
is generated if the status message is absent a first time 
period. If the main application processor fails to 
change states in response to the reset signal, the 
attempted change is ceased. 

In a fourth aspect, the method includes 
determining the state of the main application processor 
in response to a wakeup signal. If the state is a 
suspend state, a change to a Run state is attempted. If 
the state is a Run state, the state is monitored for a 
time period for a change to the suspend state. 

In a fifth aspect, the method includes 
attempting a change from a suspend state to a Run state. 
The management processor monitors the state of the main 
application processor. If the state is unchanged after a 
first time period, the attempt is repeated. If the 
repeated attempt fails, the attempts are ceased. 

In a sixth aspect, the method includes 
attempting to place a main application processor in a 
suspend state. If the attempt fails, the voltage to the 
main application processor is removed without a reset 
attempt . 

The present invention is defined by the following 
claims, and nothing in this section should be taken as a 
limitation on those claims. Further aspects and 



advantages of the invention are discussed below in 
conjunction with the preferred embodiments. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram showing a 
multimedia system employing the power management strategy 
of the present invention. 

Figure 2 is a state diagram showing state 
transitions of the system in Figure 1. 

Figure 3 is a state diagram showing monitoring 
of heartbeat messages during full -power operation. 

Figure 4 is a state diagram showing fault 
management during wake-up of the main application 
microprocessor . 

Figure 5 is a state diagram showing fault 
management during shutdown to the suspend- to -RAM state of 
the main application microprocessor. 

Figure 6 is a state diagram showing fault 
management during shutdown to the suspend- to-disk state 
of the main application microprocessor. 

Figure 7 is a state diagram showing one 
embodiment for transitioning to a full power state. 

Figure 8 is a state diagram showing one 
embodiment for limited monitoring of heartbeat messages 
during full -power operation. 

Figure 9 is a state diagram showing one 
embodiment of limited fault management during wake-up of 
the main application microprocessor. 

Figure 10 is a state diagram showing one 
embodiment of a fault strategy for transitioning from a 
suspend- to -RAM to a suspend- to-disk state. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 



Referring to Figure 1, a motherboard 10 is 
connected to a video processor card 11 and a vehicle 
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input/output processor (VIOP) board 12. Motherboard 10 
includes a complex instruction set computing (CISC) 
processor 13 which may comprise an Intel Celleron 
processor, for example. A support chip set 14 is 
5 connected to processor 13 and is adapted to function 

specifically with microprocessor 13. Support chip set 14 
may be one or more integrated circuits and may preferably 
be comprised of north and south portions of an Intel 
Banister Bridge . 

10 Chip set 14 provides interfaces between 

processor 13 and various other devices and provides local 
power conditioning and management for processor 13 . 
Support chip set 14 includes a DRAM memory controller for 
controlling a DRAM memory 15. Chip set 14 also includes 

15 interface controllers for a mass storage devices such as 
a disk drive 16 and a CD-ROM drive 17. Processor 13 is a 
main application processor and executes operating system 
software and application programs contained on disk drive 
16 and/or CD-ROM drive 17. 

20 A time of day (TOD) unit 18 is connected to 

chip set 14 and keeps track of time of day in a 
conventional manner. A small on-board battery (not 
shown) is preferably provided to maintain operation of 
TOD unit 18 even when power is off to motherboard 10. 

25 Chip set 14 receives several different 

regulated voltages from VIOP 12 as is described below. 
Chip set 14 uses the regulated voltages to provide power 
to processor 13 and DRAM 15 according to its own, 
conventional power management strategy. Motherboard 10 

30 may further include a core power supply 19 driven by chip 
set 14 to provide a regulated voltage at a value not 
being supplied by VIOP 12. 

A super- input /output (I/O) interface 20 is 
connected to chip set 14 and provides a serial 

35 communications port COM1 which is connected to VIOP 12. 
The serial communications link carries messages between 
processor 13 and VIOP 12 relating to power management and 
to input and output data and control signals. 
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Motherboard 10 includes other conventional 
components which are not shown such as standard bus 
interfaces such as ISA, PCI, and USB interfaces. Video 
card 11 may be connected to a PCI expansion slot, for 
5 example. Video card 11 includes a video output connected 
to a display 21 which is powered by an off -board 
regulator 22 under control of VIOP 12. Display 21 
comprises any one or more of various display devices, 
such as a liquid crystal display (LCD) or monitor. 

10 VIOP 12 includes a reduced power microprocessor 

2 5 which executes program instructions contained in a 
read-only memory (ROM) 26, for example. Reduced power 
microprocessor 25 may be comprised of a Motorola 68 HC 
912 processor, for example, or other low power processor 

15 of the type often used on automotive applications. A 
principle job of processor 25 is to control a power 
controller and regulator 27 which has a plurality of 
switched and unswitched regulated voltage outputs. For 
example, switched outputs of 3.3V, 5V, and 10V are 

20 provided along with an unswitched (i.e., continuous) 
supply of 3.3V. Each of these regulated voltages is 
provided to main motherboard 10 and then distributed to 
various components which use them, including chip set 14. 
These voltages are used to operate microprocessor 13, 

25 power memory 15 for refreshing and accessing memory 
contents, and for powering portions of chip set 14 
itself. In addition, power may be directly supplied to 
disk drive 16, CD-ROM 17 and TOD unit 18. 

Power controller and regulator 2 7 may also 

30 provide regulated voltages to devices located remotely 

from motherboard 10 and VIOP 12, such as power regulator 
22 for display 21. As another example, a separate, 
remote module may include a GPS receiver and a wireless 
data transceiver receiving GPS power (GPS PWR) and 

35 transceiver power (XCVR PWR) from power controller and 
regulator 27. 

VIOP 12 includes a physical interface 28 for 
providing a serial port connection for microprocessor 2 5 
to communicate with the COM1 port of motherboard 10. In 
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addition, there are several direct communication lines 
connected between motherboard 10 and microprocessor 25. 
Microprocessor 2 5 provides a power button signal in 
response to an on/off switch 3 0 controlled by the user to 
5 indicate when to place the multimedia system in an in-use 
condition, and a reset signal for causing the main 
application processor 13 to reboot. Chip set 14 provides 
three distinct signals SUS A, SUS B, and SUS C, which 
identify the suspended power state in which the power 
10 management strategy of chip set 14 is operating. 

Microprocessor 25 also receives a signal from 
an ignition switch 31 to identify whether the vehicle is 
in a powered state or an unpowered state. Based upon the 
state of ignition switch 31 and on/off switch 30, 

15 microprocessor 25 and microprocessor 13 each determine an 
appropriate power state for main application processor 13 
and chip set 14. Depending upon the current state and 
next desired state of microprocessor 13 and chip set 14, 
microprocessor 25 may merely verify that the correct 

20 state has been implemented by chip set 14, it may command 
a different state over the serial communication link, or 
it may switch the state of power controller and regulator 
2 7 to provide different regulated voltages to main 
motherboard 10. Also based upon the state of various 

25 switches or other inputs, microprocessor 25 may control 
the switching on and off of off-board regulator 22 for 
powering display 21 as appropriate. A network 

interface 32 is contained in V10P 12 and is connected to 
microprocessor 25. Network interface 32 may be connected 

30 to a vehicle network for exchanging data and control 
signals between motherboard 13 and a vehicle 
communication or multiplex network (also using the serial 
communication link between motherboard 10 and VIOP 12) . 

Operation of the power management strategy for 

35 the multimedia system will be described in connection 

with the state diagram of Figure 2. Prior to application 
of any power, the multimedia system is in No Power state 
40. In No Power state 40, main battery power is 
disconnected and all units are off. Once power is 
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applied, the multimedia system transitions to a Sleep 
state 41. Sleep state 41 is characterized by the 
following conditions: ignition is off, the VIOP unit is 
asleep, the main microprocessor and chip set are off, the 
5 display is off, remote wireless and GPS units are off, 
CD-ROM unit is off, and display backlighting is off 
(backlighting refers to background lighting of an LCD 
display and is desirable to provide general panel 
lighting of a vehicle dashboard during low light 

10 conditions even though the unit itself is off) . During 
Sleep state 41, if the vehicle external lights such as 
headlights are turned on, then it is desirable to supply 
backlighting power for the display. Thus, a lights-on 
condition triggers a transition to a Power Save state 42 

15 in which the VIOP unit is awake and can control 

backlighting power to the display. When the lights then 
go off, a transition is made to return to Sleep state 41. 

Transition may be made to Sleep state 41 from 
any other state during a shutdown caused by an error or 

20 lock-up condition of the main microprocessor causing it 
to fail to respond to VIOP messages. In that case, the 
VIOP processor shuts down all switched power to main 
motherboard 10 thereby initiating Sleep state 41. 

Power Save state 42 is characterized by the 

25 following conditions: ignition is off, VIOP unit is 

awake, main application processor and chip set are asleep 
in a suspend-to-disk state (referred to as a D3 state for 
an Intel Celleron processor) , the display is off, 
wireless and GPS transceivers are off, CD-ROM unit is 

30 off, and display backlighting may or may not be on 

depending upon other vehicle settings (e.g., headlights) . 
When the vehicle ignition turns on, a transition will be 
made out of Power Save state 42 depending upon the status 
of the on/off power button on the multimedia unit itself. 

35 If the power button is off, then a transition is made to 
Standby-i- state 43. If the power button is on, then a 
transition is made to Full Power state 44. 

Standby-i- state 43 is characterized by the 
following conditions: ignition is on, VIOP unit is awake, 
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main processor and chip set are on, display is off, 
wireless data transceiver is off, GPS unit is on, CD-ROM 
unit is off, and backlighting of the display is dependent 
on other lamp states. While in Standby+ state 43, a 
transition may be made to Full Power state 44 in response 
to the turning on of the power button, activity on any 
other button controls of the multimedia system as 
appropriate, or the insertion of a media such as a CD 
audio disc. If the ignition switch is turned off while 
in Standby+ state 43, a transition is made to Standby 
state 45. 

In one embodiment, the state of the main 
microprocessor is checked prior to the transition to the 
Full Power state 44. Figure 7 shows a state diagram with 
a check state 102 for entering the Full Power state 44. 
For any of the activities shown in Figure 2 for waking up 
the main microprocessor, such as the ignition on with the 
power button on, the state of the main microprocessor is 
checked. If the state is Run or Full Power state 44, the 
VIOP unit waits for a suspend to process in state 104. 
For example, a five second or other timeout period 
passes. Assuming the main microprocessor enters a 
suspend state as monitored by the VIOP unit, a wakeup 
command is provided by the VIOP unit in state 106. If 
the timeout passes without the main processor entering 
the suspend state, then the VIOP unit waits for an 
initial heartbeat as described below (e.g. the fault 
strategy associated with the initial heartbeat is 
implemented to correct any faults) . 

If the main microprocessor is not in a Run 
state during the check 102, the wakeup command is 
provided to the main microprocessor in state 106. The 
VIOP unit then waits for an initial heartbeat 108 and the 
transition to the Full Power state 44. Checking the 
state of the main microprocessor prior to the transition 
to the Full Power state 44 avoids resetting the main 
microprocessor when a transition to a suspend state is 
being executed. Where the main microprocessor is running 
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for another reason, a wakeup attempt may not be 
attempted . 

Referring again to Figure 2, Standby state 45 
is characterized by the following conditions: ignition is 
off, VIOP unit is awake, the main processor and chip set 
are asleep in the suspend- to -RAM state (designated as 
state S3 in the Intel Celleron power management 
strategy) , display is off, wireless transceiver and GPS 
receiver are off, CD-ROM unit is off, and display 
backlighting depends upon vehicle lamps. When in Standby 
state 45, a fairly low quiescent current consumption of 
about 10 0 mA may be obtained. Although this current draw 
is fairly low, it is higher than can be maintained for 
extremely long periods in a vehicle which must rely on 
its main battery for starting the vehicle internal 
combustion engine. Therefore, Standby state 45 includes 
operating of the time of day timer in order to detect a 
predetermined period of time, after which a transition is 
made to Power Save state 42. In Power Save state 42, the 
main processor and chip set switch to the suspend- to-disk 
condition and since the DRAM memory does not need to be 
continuously refreshed, the power consumption may drop to 
about 3 5 mA. 

In a preferred embodiment, the predetermined 
25 period of time is about 24 hours. If the vehicle is re- 
started within 24 hours, the current state of memory will 
still be in DRAM and a much faster boot-up of the system 
can be achieved (a boot -up time of about 6 seconds as 
opposed to a boot-up time of from 60 to 90 seconds from 
the suspend-to-disk condition) . If the ignition switch 
is turned on while in Standby state 45, a transition is 
made to Standby+ state 43 or Full Power state 44 
depending upon the position of the power button. 

In the Full Power state 44, all units are on 
and fully awake. If the power button is turned off while 
in Full Power state 44, a transition is made to Standby + 
state 43. If the ignition switch is turned off while in 
Full Power state 44, then a transition is made to Standby 
state 45. 



- 11 - 



\ 

-12- 

The main microprocessor and chip set may have 
many different suspend or low power states. In the 
preferred embodiment of the present invention, the 
suspend- to-RAM and suspend-to-disk power states are 
preferred to be used. In the suspend- to-RAM (S3) power 
state, an instant on and boot -up time of 6 seconds is 
achieved. During this power state, the DRAM is in a self 
refresh mode. In the preferred embodiment using an Intel 
Celleron processor and a 43 0Tx Bannister Bridge chip set, 
the chip set is configured so that about 80% of the chip 
set is turned off. Specifically, the north bridge 
PCI/ACPI well is powered, the DRAM lines are set for self 
refresh mode, and the south bridge interrupt controller 
and power controller have power while the Pentium 
processor is off. The suspend- to-RAM state draws between 
70 and 100 mA of current and the state may be exited by 
pressing the power button while the ignition is on, or by 
a reset signal from the VIOP. 

In the suspend-to-disk (D3) power state, an 
image or snapshot of the DRAM memory contents is stored 
to disk (preferably a compact flash drive) . The north 
bridge of the chip set is powered down and the south 
bridge is mostly powered down except for the south bridge 
section that has power control. Current draw is between 
1 and 2 mA in this power state. Current draw results in 
part from the need to drive the SUS A, B, and C lines for 
giving the power state status of the main controller and 
chip set. 

The serial communications link between 
microprocessors 13 and 25 carries various types of 
messages, such as input/output data and control signals 
for various peripheral devices. In addition, fault 
management and status messages are communicated to permit 
reduced power microprocessor 25 to ensure proper 
operation of the multimedia system. Thus, if the main 
application microprocessor becomes "locked-up" or 
"frozen," this is detected by the reduced power 
microprocessor and action can be taken to restore proper 
operation without requiring user intervention. 
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Furthermore, if the main application microprocessor 
assumes a power state other than the one required by the 
power management strategy, this is detected and, if not 
correctable, then the reduced power microprocessor avoids 
possible excessive current consumption by shutting off 
most power to the main application microprocessor. 

The fault management strategy of the present 
invention employs a status message (or "heartbeat" 
message) that is programmed to be sent periodically by 
the main application microprocessor to the reduced power 
microprocessor whenever the main application 
microprocessor is running (i.e., operating in the Full 
Power state or the Standby+ state) . When the processor 
is first booted up, there will be some delay before it is 
able to send its first heartbeat message. Thereafter, 
the main application processor is programmed to generate 
a regular heartbeat message (e.g., every 5 seconds). If 
the reduced power microprocessor fails to receive an 
expected heartbeat message within this predetermined 
time, then the main application processor is assumed to 
have malfunctioned and corrective action is taken. 

This portion of the fault strategy is shown in 
greater detail in Figure 3. After initiation of a boot- 
up of the main application processor, the fault strategy 
enters a state 50 wherein a waiting period is established 
within the reduced power microprocessor of 60 seconds. 
During this 60 second time period, a heartbeat message 
would be expected from the main application processor if 
boot -up to a normal running state is achieved. If, as 
expected, a heartbeat message is received during the 60 
second time period, then a shorter waiting period of 5 
seconds is established in a state 51. If a heartbeat 
message is received during the shorter waiting period, 
then the fault strategy stays in state 51 with a re- 
initiation of the 5 second waiting period. If a 
heartbeat message is not detected by the reduced power 
microprocessor during the 5 second waiting period, then 
it enters state 52 and sends a reset signal to the main 
application processor to re-boot it. Then the reduced 



- 13- 



-14- 



power microprocessor returns to state 50 to establish the 
60 second waiting period. 

In one embodiment, the initial waiting period 
(60 seconds in the above example) varies as a function of 
5 the main microprocessor's state. For example, a change 
from a suspend- to -RAM or suspend- to-disk state to a Run 
state is attempted. If the main microprocessor is 
transitioning from an off, suspend- to-disk or a state 
other than the suspend- to -RAM state, the waiting period 

10 is set to 60 seconds, 120 seconds or another time period. 
If the main microprocessor is transitioning from the 
suspend-to-RAM state, the initial waiting period is set 
to 5 seconds or another time period shorter than for 
other states. This shorter time period allows for 

15 earlier detection of errors. The varied time periods 

account for the difference in booting or wake-up time as 
a function of the state of the main microprocessor. 

If a heartbeat message is not received during 
the 60 second or other time period in state 50, then a 

20 series of resets followed by additional 60 second or 
other waiting periods are established in states 53 
through 58 . If a heartbeat message is received while in 
states 54, 56, or 58, then normal operation results in 
state 51. If on the final try in state 58 no heartbeat 

25 message is received, then the regulated voltages supplied 
to the main motherboard by the VIOP power controller and 
regulator are cycled off and then back on in an attempt 
to recover proper operation of the main application 
microprocessor. Then the main application microprocessor 

30 attempts to restart or re-boot, and the fault strategy 
returns to state 50. 

In an alternative embodiment to change the main 
application processor from a suspend state to a Run state 
shown in Figure 8, the fault strategy returns to state 50 

35 a limited number of times, such as once. If the first 
two or three resets in states 53, 55 and 57 fail and 
cycling the power in state 59 fails, the fault strategy 
returns to state 50. Thereafter, the resets are 
attempted again. If these resets fail, the fault 
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strategy ceases to attempt to wake-up the main 
microprocessor. When the ignition is turned of and then 
turned on, the fault strategy may repeat. 

Other activities may also occur in response to 
ceasing the wake-up attempt, such as turning off a 
display, turning off LCD backlighting, and/or removing 
power to other components. In alternative embodiments, 
only one reset is attempted after returning to state 50. 
Furthermore, fewer or additional of any of resets or 
cycling power may be attempted before cycling power 
and/or ceasing to attempt to wake up the main 
microprocessor . 

A portion of the fault strategy of the present 
invention active during an attempt to wake up the main 
application processor from a suspend- to-disk (OFF or D3) 
condition or a suspend- to-RAM (SUSPEND or S3) condition 
is shown in Figure 4. The main application 
microprocessor is in SUSPEND or OFF initially in state 
60. A transition to state 61 is made in response to a 
wake -up command. Such a wake -up command may be a signal 
generated by any devices in the system such as a user 
control push button (e.g., power button), the vehicle 
ignition switch, or insertion of a media (e.g., CD-ROM, 
CD audio, or cassette tape) . The main motherboard may 
respond directly to these signals and may generate a 
wake-up command itself. In addition, the reduced power 
microprocessor monitors these conditions and determines 
when existing conditions should wake the main application 
processor to its full-powered operating state. Then, in 
state 61, it checks status lines SUS A, B, and C, to 
determine the power state of the main application 
processor. If these lines indicate a run state, then no 
further action is taken. However, if these lines 
indicate an OFF or SUSPEND state, then the reduced power 
microprocessor transmits its own wake-up command over the 
serial communication link in state 62. The wake-up 
command is retried up to 2 more times (after sufficient 
waiting periods) if the command is unsuccessful. After 
the final try, then the state of the vehicle ignition is 
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determined. If the ignition is off, then there should be 
no further consumption of current and the regulated 
voltages are turned off in state 63. On the other hand, 
if the ignition is on then the regulated voltages are 
5 cycled off and back on in state 64 in an attempt to 

restore proper system operation. Then another wake-up 
command is transmitted and a return is made to state 61. 

Alternatively, if the main microprocessor fails 
to transition out of the suspend state in response to a 

10 limited number of retrying a wake-up command and/or 
cycling power 64, the attempts to wake up the main 
microprocessor are ceased until the ignition is turned 
off and then on again. Figure 9 shows the state diagram 
of Figure 4 altered to limit the number of retries when 

15 the ignition is on. In the embodiment shown in Figure 9, 
the fault strategy returns to state 61 once after cycling 
the power in state 64. If the main microprocessor does 
not wake up, the wake-up command is repeated in state 62. 
If the main microprocessor fails to wake-up, the attempts 

20 to wake-up the main microprocessor are ceased in order to 
avoid further drain of power and damage to components, 
such as the LCD. In alternative embodiments, the wake-up 
command is not repeated after returning to state 61, a 
different number of retries are performed (e.g. 2 instead 

25 of 3) and/or more than one attempt including cycling the 
power is made. 

A portion of the fault strategy of the present 
invention active during an attempt to shutdown the main 
application processor to a suspend- to -RAM (SUSPEND or S3) 

30 condition from a full-on condition is shown in Figure 5. 
Proper shutdown to the SUSPEND condition is important in 
order to ensure limited current consumption when not in 
use and to limit boot-up time the next time the vehicle 
ignition switch is activated (i.e., within the next 24 

35 hours) . 

In state 70, the main application processor is 
in a full-on or run condition. A transition to state 71 
is made in response to a shutdown command. Such a 
shutdown command may be the signal generated by the 
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vehicle ignition switch being turned to its off position. 
The main motherboard preferably responds directly to the 
signal and generates the shutdown command itself. In 
addition, the reduced power microprocessor monitors the 
5 ignition switch and determines when the main application 
processor should be going to its suspended operating 
state. Then, in state 71, it checks status lines SUS A, 
B, and C, to determine the power state of the main 
application processor. If these lines indicate a SUSPEND 

10 state, then no further action is taken. However, if 

these lines indicate a run state, then the reduced power 
microprocessor transmits its own shutdown command over 
the serial communication link in state 72. The shutdown 
command is retried up to 2 more times (after sufficient 

15 waiting periods) if the initial command is unsuccessful. 
After the last try and if the SUSPEND condition is still 
not achieved, then a reset signal is sent to the main 
application microprocessor in state 73. After reset, a 
further shutdown command is sent and the SUS A, B, and C 

20 lines are checked again in state 74. If the SUSPEND 
condition is still not achieved, then the regulated 
voltages are powered off in state 75. 

A portion of the fault strategy of the present 
invention active during an attempt to shutdown the main 

25 application processor to a suspend- to-disk (OFF or D3) 
condition from a suspend- to -RAM condition is shown in 
Figure 6. Proper shutdown to the OFF condition is 
important in order to ensure minimal to no current 
consumption during long term non-use at the expense of 

30 having a long boot -up time the next time the vehicle 
ignition switch is activated. 

In state 80, the main application processor is 
in a suspend-to-RAM condition. Both the main application 
microprocessor and the reduced power microprocessor 

35 detect passage of a long duration time period (e.g., 24 
hours) . Preferably, the time period measured by the 
reduced power microprocessor is slightly longer, so that 
if the main application microprocessor functions 
properly, it will perform the suspend- to-disk operation 



- 17- 



-18- 



(e.g., transferring RAM contents to a compact flash 
drive) on its own. When the slightly longer time period 
measured by the reduced power microprocessor expires, a 
transition is made in state 81 where the reduced power 
5 microprocessor checks status lines SUS A, B , and C to 
determine the power state of the main application 
processor. If these lines indicate an OFF state, then 
the suspend-to disk has already been executed and no 
further action is taken. However, if these lines 

10 indicate a SUSPEND state, then the reduced power 

microprocessor transmits a wake-up command over the 
serial communication link in state 82 so that a shutdown- 
to-disk command can be executed by the main application 
processor. Status lines SUS A, B, and C are checked in 

15 state 83 to verify that a full -on or run state has been 
entered. If the run state is achieved, then a suspend - 
to-disk (STD) command is transmitted in state 84. 
Otherwise, the wake-up command is retried up to 3 more 
times in state 85 (after sufficient waiting periods) . 

20 After the last try and if the run condition is still not 
achieved, then regulated voltages are turned off to the 
main application microprocessor in state 86. 

Once the run state is achieved and the STD 
command transmitted in state 84, status lines SUS A, B, 

25 and C are checked in state 8 7 to verify that the OFF 

state has been entered. If not, then the STD command is 
retried 3 more times in state 88. If the OFF state is 
still not achieved, then a reset signal is sent in state 
89, another STD command is sent in state 90, and a final 

30 status check is made of status lines SUS A, B, and C, in 
state 91. If the OFF state is still not achieved, then 
power to the main application microprocessor is turned 
off in state 92 . 

In an alternative embodiment, the reduced power 

35 microprocessor monitors the main microprocessor in the 
suspend-to-RAM state in order to detect any errors. 
Figure 10 shows the states of the main microprocessor and 
reduced power microprocessor for this embodiment. The 
main microprocessor is in the suspend-to-RAM state 120. 
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In state 122, the reduced power microprocessor 
periodically awakes from a sleep state to monitor the 
state of the main microprocessor. For example, the 
reduced power microprocessor wakes every 7 or 8 seconds 
5 and checks status lines SUS A, B, and C to determine the 
power state of the main application processor. Other 
time periods may be used, such as time periods based on 
the amount of power consumption acceptable while 
minimizing the time period (i.e., increasing the 

10 frequency of checks for any errors) . The reduced power 
microprocessor monitors the status without a request for 
a state change in this embodiment. 

If the status lines indicate an OFF state, then 
the suspend-to disk has already been executed and no 

15 further action is taken. For example, the software or 
hardware of the main application processor schedules and 
implements a transition to a suspend- to-disk state. If 
these lines indicate the suspend-to-RAM state, the 
reduced power microprocessor continues to monitor the 

20 main microprocessor. The monitoring continues for as 
long as the 24 hour or other suspend-to-RAM main 
application processor software or hardware designated 
total time period for suspending-to-disk passes. After 
this total time period, the fault strategy discussed 

25 above for Figure 6 is performed. 

If the lines indicate a Run state, the reduced 
power microprocessor waits for a time period to check the 
lines again in state 124. In one embodiment, the time 
period is about 90 seconds, but other time periods based 

30 on the time the main microprocessor and other hardware 
need, average or may use to suspend- to-disk from a Run 
state may be used. If after the time period, the main 
microprocessor is OFF or in the suspend- to-disk state, 
the reduced power microprocessor returns to sleep, shuts- 

35 down or transitions to a lower power state. If after the 
time period, the main microprocessor is in the Run or 
suspend-to-RAM state, the reduced power microprocessor 
transmits a request for the main microprocessor to 
suspend-to-disk in state 126. If the main microprocessor 
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transitions to the suspend- to-disk state, the reduced 
power microprocessor returns to sleep, shuts -down or 
transitions to a lower power state. Otherwise, power to 
the main microprocessor is turned off. 
5 In yet other alternative embodiments, resets 

are not performed for failed attempts to suspend- to -RAM 
or suspend-to-disk. Since the contents of the RAM are 
not maintained through a reset in some application 
processors, the power to the main application 

10 microprocessor is turned off in states 75 or 92 of 

Figures 5 or 6 , respectively. The resets of states 73 
and 8 9 are skipped. 

While the invention has been described above by 
reference to various embodiments, it will be understood 

15 that many changes and modifications can be made without 
departing from the scope of the invention. For example, 
any of the various embodiments or aspects may be used 
alone or in combination with the same or different 
hardware . 

20 It is therefore intended that the foregoing detailed 

description be understood as an illustration of the 
presently preferred embodiments of the invention, and not 
as a definition of the invention. It is only the 
following claims, including all equivalents, that are 

25 intended to define the scope of this invention. 
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